This Page Is Inserted by IFW Operations 
and is not a part of the Official Record 

BEST AVAILABLE IMAGES 

Defective images within this document are accurate representati 
the original documents submitted by the applicant. 

Defects in the images may include (but are not limited to): 

• BLACK BORDERS 

* TEXT CUT OFF AT TOP, BOTTOM OR S IDES 

• FADED TEXT 

♦ ILLEGFBLE TEXT 

• SKEWED/SLANTED IMAGES 

• COLORED PHOTOS 

* BLACK OR VERY BLACK AND WHITE DARK PHOTOS 

* GRAY SCALE DOCUMENTS 


IMAGES ARE BEST AVAILABLE COPY. 


As rescanning documents will not correct images, 
please do not report the images to the 
Image Problem Mailbox. 


WORLD INTELLECTUAL PROPERTY ORGANIZATION 
International Bureau 



PCT 

INTERNATIONAL APPLICATION PUBLISHED UNDER THE PATENT COOPERATION TREATY (PCT) 


(51) International Patent Classification 6 : 
G06F 17/30, H04L 29/06 


Al 


(11) International Publication Number: WO 99A3418 

(43) International Publication Date: 18 March 1999 (18.03.99) 


(21) International Application Number: PCT/US98/ 18762 

(22) International Filing Date: 9 September 1998 (09.09.98) 


(30) Priority Data: 

08/927,005 


1 0 September 1997 (1 0.09.97) US 


(71) Applicant: SQUARE D COMPANY IUS/US1; 1415 South 

Rosdle Road, Palatine, IL 60067 (US). 

(72) Inventors: PAPADOPOULOS, A., Dean; 1 1 Rooks Run, 

Groton, MA 01450 (US). TANZMAN, Allan; 37 Wessex 
Road, Newton Center, MA 02159 (US). BAKER, Richard, 
A., Jr.; 288 Middle Street, West Newbury, MA 01985 (US). 
BELLI ARDI, Rodolfo. G.; Apartment 1, 39 Tiemont Street, 
Maiden, MA 02148 (US). DUBE, Dennis. J. ( W.; 8 Birch 
Lane, Pelham, NH 03076 (US). 

(74) Agent: GOLDEN, Larry, L; Square D Company, 1415 South 
Roselle Road, Palatine, 1L 60067 (US). 


(81) Designated States: CA, JP, MX, European patent (AT, BE, 
CH, CY, DE, DK. ES, FI, FR, GB, GR, IE, IT, LU, MC, 
NL, PT, SE). 


Published 

With international search report. 


(54) Title: WEB INTERFACE TO A PROGRAMMABLE CONTROLLER 
(57) Abstract 

A control system includes an Internet web interface to a network of at least one programmable logic control system running an 
application program for controlling output devices in response to status of input devices. The Web interface runs Web pages from an 
Ethernet board coupled directly to the PLC back plane and includes an HTTP protocol interpreter, a PLC back plane driver, a TCP/ IP stack, 
and an Ethernet board kernel. The Web interface provides access to the PLC back plane by a user at a remote location through the Internet. 
The interface translates the industry standard Ethernet, TCPAP and HTTP protocols used on the Internet into data recognizable to the PLC. 
Using this interface, the user can retrieve all pertinent data regarding the operation of the programmable logic controller system. 


FOR THE PURPOSES OF INFORMATION ONLY 


Codes used to identify States party to the PCT on the front pages of pamphlets publishing international applications under the PCT. 


AL 

Albania 

ES 

Spain 

LS 

Lesotho 

SI 

Slovenia 

AM 

Armenia 

FI 

Finland 

LT 

Lithuania 

SK 

Slovakia 

AT 

Austria 

FR 

France 

LU 

Luxembourg 

SN 

Senegal 

AU 

Australia 

CA 

Gabon 

LV 

Latvia 

SZ 

Swaziland 

AZ 

Azerbaijan 

GB 

United Kingdom 

MC 

Monaco 

TD 

Chad 

BA 

Bosnia and Herzegovina 

CE 

Georgia 

MD 

Republic of Moldova 

TG 

Togo 

BB 

Barbados 

GH 

Ghana 

MG 

Madagascar 

TJ 

Tajikistan 

BE 

Belgium 

GN 

Guinea 

MK 

The former Yugoslav 

TM 

Turkmenistan 

BF 

Burkina Faso 

GR 

Greece 


Republic of Macedonia 

TR 

Turkey 

BC 

Bulgaria 

HU 

Hungary 

ML 

Mali 

TT 

Trinidad and Tobago 

BJ 

Benin 

IE 

Ireland 

MN 

Mongolia 

UA 

Ukraine 

BR 

Brazil 

IL 

Israel 

MR 

Mauritania 

UG 

Uganda 

BY 

Belarus 

IS 

Iceland 

MW 

Malawi 

US 

United States of America 

CA 

Canada 

IT 

Italy 

MX 

Mexico 

uz 

Uzbekistan 

CF 

Central African Republic 

JP 

Japan 

NE 

Niger 

VN 

Viet Nam 

CC 

Congo 

KE 

Kenya 

NL 

Netherlands 

YU 

Yugoslavia 

CH 

Switzerland 

KG 

Kyrgyzstan 

NO 

Norway 

ZW 

Zimbabwe 

CI 

C6lC d' I voire 

KP 

Democratic People's 

NZ 

New Zealand 



CM 

Cameroon 


Republic of Korea 

PL 

Poland 



CN 

China 

KR 

Republic of Korea 

IT 

Portugal 



CU 

Cuba 

KZ 

Kazakstan 

RO 

Romania 



CZ 

Czech Republic 

LC 

Saint Lucia 

RU 

Russian Federation 



DE 

Germany 

LI 

Ltechtemtein 

su 

Sudan 



DK 

Denmark 

LK 

Sri Lanka 

SE 

Sweden 



EE 

Estonia 

LR 

Liberia 

SG 

Singapore 




WO 99/13418 


PCT/US98/18762 


WEB INTERFACE TO A PROGRAMMABLE CONTROLLER 

DESCRIPTION 

TECHNICAL FIELD 

Applicants' invention relates generally to the field of programmable 
controllers and more particularly to a system for coupling a network of 
programmable controllers through an internetwork to a monitoring and control 
5 device. 

RELATED APPLICATIONS 

This application is related to the following, commonly assigned 
application filed concurrently herewith, entitled "Apparatus for Controlling 
10 Internetwork Communications" (Application Serial No. 08/xxx,xxx, Applicants 
Docket No. SAA-2). The contents of these Applications are expressly 
incorporated herein by reference. 

BACKGROUND ART 

15 Remote monitoring and control systems and processes have taken 

many forms. In the past, dedicated lines became the most common form of 
communication between a control system and a d remote location. This has 
limited application since the control system was not accessible from multiple 
locations. Modems have made it possible to access the control system from 
20 different locations, but these types of systems are generally restricted to 

downloading and uploading data files. Providing any type of control function 
between locations is rather limited in this type of environment. Further, an 
end user generally required a customized interface to access the control 
system. 

25 With the growth of Internet, and its World Wide Web providing a 

delivery platform for organizing Internet data through hypertext links, a client 
server system can be designed that will give each end user the 
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same type of a user friendly interface with the same universal access to 
services on the Web. The Web is a network of documents called sites or 
pages stored on server computers throughout the world. Each page will 
usually contain text, some type of multimedia offerings such as graphic 
5 images, video, or audio, and possible hypertext links to other documents. 
A browser allows a user to read the pages and interact with the choices 
associated with it. The browser is a graphical software program that 
sends commands to the Internet Web site and displays whatever 
information is available on the page. Various browser programs are 
10 commercially available from different manufacturers. 

The Internet network employs methods designed to handle 
thousands of general purpose computers sharing a single cable, and 
therefore has no ability to differentiate traffic in terms of its purpose or the 
criticaiity of its data. The Internet is no longer a network of computers 
15 sharing a single cable, but rather a web of interconnected point to point 
links involving both general purpose stations and specialized 
infrastructure components such as routers and firewalls. 

The type of personal computer or work station used by the end 
user to connect to the Web is of no regard. Communication over the 
20 Internet and other networks requires one of several types of protocols. 
Protocols such as Internet Protocol (IP) provide for file transfers, 
electronic mail, and other services. A Sun Microsystem's programming 
language known as Java, along with Hyper Text Markup Language 
(HTML) used in designing layouts and graphics for a Web site or page 
25 has extended Internet technology such that a Web site can be used for 
dynamic applications, commonly called applets, that can be downloaded 
and run by the end user. These applets are interpreted and run within a 
Web browser and have been generally restricted to word processing and 
similar uses. Downloading and running applets can be slow in 
30 comparison to other types of complied languages. Security rules imposed 
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on a browser and enforced by the underlying JAVA language prevent 
applets from obtaining certain data from any other device other than the 
Web server itself. 

Programmable logic controllers (PLCs) are widely used in industry 

5 and process control. Many manufacturers provide factory automation 
information using Microsoft Windows and other types of communication 
networking environments. These networks are usually slow, are not 
universally accessible and are limited to monitoring and data exchange. 
Control may be implemented, but since the communication networks are 

10 non-deterministic, control is not real time. Specialized industrial networks 
using proprietary fieldbus alternatives can be very expensive. Conversion 
products are required to allow information carried over those networks to 
be visible on a general purpose network. There are significant installation 
and other deployment costs associated with the existence of such 

15 intermediate devices. Firewalls between the Web server and the 
application are designed to solve problems of security and are not 
designed for high performance. 

It would be desirable to develop an automation control system 
whereby an user could use general, commercial networks such as the 

20 Internet in place of specialized industrial networks to remotely monitor 
automation control devices such as PLCs. 

SUMMARY OF THE INVENTION 

25 Accordingly, the principal object of the present invention is to 

provide an interface between an industrial control system and a Web 
browser coupled to a connectionless network such as Internet. 

Another object of the present invention is to provide remote access 
through a Web browser to information and data contained in an industrial 

30 control system having a Programmable Logic Controller. 
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in the preferred embodiment of the invention, the invention allows 
for easy access over a commercial network such as Internet to 
information within a programmable logic controller (PLC). Access can be 
made locally or worldwide using a commercial Web browser. The 

5 invention is comprised of a control system of essential elements including, 
but not limited to a Web interface, a local network, and a network 
interface to at least one PLC control system running an application 
program for controlling output devices in response to status of input 
devices. The Web interface runs Web pages from an Ethernet board 

10 coupled directly to the PLC back piane and includes an HTTP protocol 
interpreter, a PLC back plane ariver. a TCP/IP stack, and an Ethernet 
board kernel. The Web interface provides access to the PLC back plane 
by a user at a remote location through the Internet. The interface 
translates the industry standard Ethernet, TCP/IP and HTTP protocols 

15 used on the Internet into data recognizable to the PLC. Using this 

interface, the user can retrieve ail pertinent data regarding the operation 
of the PLC, including PLC configuration, I/O and register status, operating 
statistics, diagnostics, and distributed I/O configurations. Updates to 
operating software can also be downloaded through the Internet access. 

20 Other features and advantages of the invention, which are believed 

to be novel and nonobvious, will be apparent from the following 
specification taken in conjunction with the accompanying drawings in 
which there is shown a preferred embodiment of the invention. Reference 
is made to the claims for interpreting the full scope of the invention which 

25 is not necessarily represented by such embodiment. 

BRIEF DESCRIPTION OF THE DRAWINGS 

Figure 1 shows an overview block diagram of a typical system 
30 illustrating the relationship between an user at a remote location and an 
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Internet Web site used for monitoring a process control system according 
to the present invention. 

Figure 2 is a basic block diagram of the present invention 
illustrating an Internet interface to a programmable logic controller 
5 system. 

Figure 3 is a block diagram of the Web server module illustrated in 
Figure 2 according to the present invention. 

Figure 4 is a typical mimic page available to a user at a remote 
location utilizing a browser which illustrates the present invention for 
10 monitoring a programmable controller system. 

DETAILED DESCRIPTION 

Although this invention is susceptible to embodiments of many 

15 different forms, a preferred embodiment will be described and illustrated 
in detail herein. The present disclosure exemplifies the principles of the 
invention and is not to be considered a limit to the broader aspects of the 
invention to the particular embodiment as described. 

Figure 1 shows an overview block diagram of typical system 

20 illustrating the relationship between an user 2 at a remote location and an 
Internet web site 4 used for monitoring a process control system 6. The 
user 2 will have a personal computer (PC) 8 having a commercially 
available browser 10, such as Netscape Communication's Navigator or 
Microsoft's Internet Explorer, installed for viewing the contents at the web 

25 site 4 by a monitor 12. The PC provides a remote human-machine 

interface (HMI) to the process control system 6. Various interconnection 
services are readily available to provide the physical and electrical 
interconnection from the PC to the Internet 14 itself. The Internet 14 is a 
collection of independent world wide communication networks that are 

30 interconnected to each other and function as a single connectionless 
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entity. Communication is based on a client-server basis, using a number 
of established protocols that allow for communication and file transfers 
between the client and the server. The most widely used protocol is 
internet Protocol (IP). 

5 The web site 4 includes a network interface 16 having an unique 

Internet address 18, a server 20, and an application program 22. The 
server 20 acts as the HTTP interpreter which uses TCP inconjunction with 
IP, through TCP/IP stack 24 to interact with the network interface 16 and 
the application program 22. This enables the data transfer between the 

10 application program 22 and the user 2 through the Internet 14. The 
application program provides data from the process control system 6. 
This data can be used to monitor the control process by the user 2 at the 
remote location. The TCP/IP stack 24 enables data transfers over the 
Internet 14 between the user 2 and the web site 4 as required for the 

15 various layers specified by the IP protocol. 

The user 2 can connect to the Internet 14 using one of a number of 
Internet service providers and will enter the address of the Web site 4 
when connected. The Web site 4 will display a home page which may 
contain text, some type of multimedia offerings such as graphic images, 

20 video, or audio, and possible hypertext links to other documents. The 
browser 10 will allow the user 2 to read the page and interact with the 
choices associated with it. The browser 10 will send commands to the 
Web site 4 which will use the application program 22 to display whatever 
information is available from the process control system 6. The browser 

25 10 functions as a remote human- machine interface or HMI control of the 
process control system as will be detailed below. 

Figure 2 shows a basic block diagram of the present invention 
illustrating the internet interface to a programmable logic controller 
system. The web site 4 includes the network interface 16 having an 

30 unique Internet address 1 8 and a web server 30. The web server 30 
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provides the home page for the website. A firewall or security for the 
overall system can be included in the Web server 30, but is generally 
maintained as part of the network interface 16. In addition to providing 
security for various pages at the site, the user can disable the web server 

5 30. A password and user list is provided in initial configuration files stored 
in the web server 30 that are downloaded from a remote server. 
Protection of the configuration file is then provided by the remote server 
and the web server 30 through the password and the user list. The web 
server 30 provides a direct connection for a programmable logic controller 

10 (PLC) 32 to the Internet 14 by plugging the web server 30 into its back 
piane 34. The web server 30 provides both a client and server interface. 
All signals between the PLC 32 and the web server 30 are through the 
back plane 34 rather than over a set of cables which would normally have 
to be coupled to input/output modules that are themselves plugged into 

15 the back plane 34. The back plane signals include addressing, control, 
data, and power. The client interface allows a user to send commands to 
a remote node over the Internet and the server interface allows for 
processing commands that originated from a remote node. Controlling 
the PLC 32 from a remote HMI, essentially on a real time basis is possible 

20 by controlling the data flow through the web server 30. 

Associated with the PLC 32 are its application programs 36, dual 
port memory 38 and I/O devices 40. The application program includes a 
ladder logic program for controlling the I/O devices 40. The web server 30 
functions as a node on a TCP/IP network 42 allowing it to send 

25 commands to the PLC 32 and receive the response. Although the TCP/IP 
network 42 in the preferred embodiment is an Ethernet network, other 
high level protocols could be used. Using a web browser at a remote 
location through the Internet 14, a user can control and view configuration 
information of the PLC 32. 
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The web server 30 is shown in greater detail in Figure 3. Various 
components provide the required connectivity to perform its functionality. 
A real time operating system 44 controls the interaction between the 
components. The operating system 44 allocates central processor (CPU) 
5 46 to various tasks, provides memory management, and provides a set of 
message services and signal services. The message and signal services 
allow for communication between tasks, and between drivers and a task. 
Connection to the TCP/IP network 42 is through an Ethernet driver 48 
which transmits and receives messages over Ethernet via an Ethernet 
10 communication chip such as an AM79C961. The web server will have an 
unique global address 18. allowing it to be addressed by other devices on 
the network. Communication can be over a fiber optic cable or a twisted 
wire pair. The Ethernet driver 48 manages transmit 50 and receive 51 
buffers in memory 52. and interfaces with the AM79C961 Ethernet chip. 
15 The transmit 50 and receive 51 buffers are shared both by the AM79C961 
and the Ethernet driver 48. The Ethernet driver 48 also provides a 
transmit request interface, and a receive indication interface to a TCP/IP 
stack 54. The AM79C961 provides a transmit queue interface, a receive 
queue interface, and generates interrupts on completion of transmitting a 
20 message, and on receiving a new message. The Ethernet driver 46 

places receive buffers in the receive queue. In the interrupt routine, the 
Ethernet driver 46 examines the receive queue. If any messages are in 
the receive queue, it passes the receive buffer to the TCP/IP stack 54. 
The TCP/IP stack 54 copies the buffer, and sometime later calls the 
25 Ethernet driver 48 to return the buffer and place the returned buffer back 
into the receive queue. 

The TCP/IP stack 54 calls the Ethernet driver 48 to transmit a 
message. The Ethernet driver 46 attempts to allocate a buffer from the 
shared memory 52. If it succeeds, it copies the message into the buffer, 
30 and places the buffer into the AM79C961 transmit queue. If there is no 
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transmit buffer, then the driver drops the transmit message. In the 
interrupt routine, the Ethernet driver 48 examines the transmit queue, and 
frees the transmitted buffers. 

The TCP/IP network 42 allows special MSTR (master) functions 
5 that allow nodes on the network to initiate message transactions. These 
MSTR functions include reading and writing data and are used for 
commands and responses. They allow programs running in the PLC 32 
to send commands to a remote node on the TCP/IP network 42 and 
receive the responses A back plane driver 56 sends commands and 
10 receives the response to the PLC 32 over the back plane 34. 

The back plane driver 56 receives request from the PLC's ladder 
logic MSTR blocks stored in iis memory 38. When a response is 
available, the back plane driver 56 passes it back to the MSTR block. 
The back plane driver 56 provides a server 58 and client 60 interface to 
15 applications. The server 58 interface allows an application to issue a 
request command to the PLC's 32 executive program, and receive its 
response. The client 60 interface allows an application to receive a new 
MSTR request, and pass back the response to the ladder logic program. 
The server 58 interface uses a queuing mechanism and call back 
20 functions. An application queues both the request and the call back 
function associated with the request. When the back plane driver 56 
services the request in its interrupt routine, it calls the associated call 
back function. The response and the original request is passed to the call 
back function. The call back function can call an operating routine to 
25 either pass a message or signal the application. 

The client 60 interface also uses queues and call back functions. 
The client application queues both an indication request on queue and a 
call back function associated with the request. When the back plane 
driver 56 detects a new MSTR block request in its interrupt routine, it calls 
30 the associated call back function. The request is passed into the call 
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back function. The call back function can call an operating system routine 
to either pass a message or signal the application.- If the back plane 
driver 56 detects that the MSTR block has been aborted, or is no longer 
being solved, it calls an user supplied associated abort call back function. 
5 The application calls a routine to pass the MSTR response and a 
associated call back routine to the driver. Sometime later, the driver 
passes back the response to the ladder logic program in its interrupt 
service routine, and then calls the user supplied call back function. 

The PLC 32 interfaces with the web server 30 hardware via the 
10 dual port memory 38. It reads and writes to the dual port memory 38 

using an ASIC chip. Writing to a specified location will cause an interrupt. 
The PLC 32 first writes a message in the dual port memory 38, and then 
causes an interrupt. The message indicates a type of command. One 
type indicates that a MSTR block is being solved. Other types are used 
15 for passing requests to the PLC 32, and obtaining the responses to the 
requests. After the PLC 32 passes the message, it polls the dual port 
memory 38 for commands placed by the back plane driver 56. These 
commands are read memory, write memory, and processing is complete. 
The back plane driver 56 uses state machines to process the MSTR 
20 interrupts. The maximum number of active MSTR blocks is set at four in 
the present invention, requiring four state machines. When the back 
plane driver 56 receives an MSTR interrupt, it attempts to find an 
associated state machine that matches with the MSTR block. If there are 
already four outstanding transactions, no more are available, and the 
25 back plane driver 56 will set the MSTR's outputs to false. If a state 
machine is found, the back plane driver 56 determines if it is a new 
transaction, an outstanding transaction, or a response is available. If it is 
a new transaction it copies the request, and calls the application's 
associated call back routine. If its an outstanding transaction, it indicates 
30 to the ladder logic program that the MSTR block is still busy, if a 
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response is available, the back plane driver 56 copies the response, sets 
either the MSTR's completion or error output, and calls the application's 
call back routine. 

Two interrupts are used for processing a request. On the first 
5 interrupt, called the preport interrupt, the back plane driver 56 copies the 
request into a data structure located in the PLC's 32 dual memory 38. On 
the second interrupt, called the end of scan interrupt, the back plane 
driver 56 copies the response from the controller's data structure into the 
user's buffer It then calls the user's associated call back function. 
10 The request for accessing the PLC's 32 registers is processed by 

the back plane driver 56. and is not sent to the PLC's executive program 
for processing. The back plane driver 56 determines the memory location 
in the memory 38 of the registers the PLC 32. At an end of scan 
interrupt, the back plane driver 56 processes the read/write register 
15 requests by sending commands via the dual port memory 38 to the PLC 
32 to read or write the locations containing the registers. The back plane 
driver 56 will service a maximum of four read/write register requests at the 
end of a scan interrupt. 

A client task 58 interfaces with the TCP/IP stack 54, the back 
20 plane driver 56, and uses the operating system 44 message services. It 
processes the MSTR request. When the client task 58 receives a MSTR 
request from the back plane driver 56, it passes the request to the TCP/IP 
stack 54. When the TCP/IP stack 54 returns a response to the client task 
58, it passes the response to the back plane driver 56. 
25 The TCP/IP stack 54 provides a Berkeley TCP/IP interface and a signal 
extension. The signal extension calls a user supplied function which 
passes in a socket number, a task ID, and an event. The signal function 
calls the operating system 44 to send a message to the task indicated by 
the task ID. It sends a message either to the client 58 or server 60 task. 
30 The client task 58 posts request indications to the back plane driver 56, 
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and the associated call back routine calls the operating system 44 to send 
a message to the client task 58 for a new MSTR transaction. 

The client task 58 manages multiple outstanding MSTR 
transactions using the state machines. There is a linked list of connection 

5 state machines. The connection state machines are used for establishing 
connection and closing connections. In addition each connection state 
machine contains a list of transaction state machines. Each transaction 
machine on the connection state machine represents a transaction to a 
node represented by the connection machine. The transaction machines 

10 are used to send a request, and process the response. The client task 58 
enters a loop after performing initialization. It calls the operating system 
44 to receive a message. The operating system will block the client task 
58 until there is a message or until there is a time out. It either receives a 
message from the TCP/IP stack 54, from a MSTR call back routine, or it 

15 times out. It process the message or the time out and then reenters the 
loop. If the message received from the operating system 44 is a new 
MSTR request, the client task will obtain a connection state machine, and 
places a new transaction machine at end of the list of the connection 
state machine's list. At this point the transaction machine will attempt to 

20 transmit the message. It may not be possible to transmit the message 
because no connection has been established, or the because the remote 
side may have applied flow control. 

If the message received from the operating system 44 is a TCP/IP 
event, the client task 58 finds the associated connection machine and 

25 determines if the TCP/IP event is an accepted connection, an aborted 

connection, or a received data event. Based on the connection state, and 
the transaction machine's state, the client task 58 processes the message 
to advance the transactions if there are any. Receiving data for the 
MSTR responses may occur over several TCP/IP events, and the 

30 transaction state machine assembles the data into a response. 
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When the client task 58 requests the TCP/IP stack to transmit a 
message, not all of the message may be transmitted. This occurs when 
the remote node is flow controlled, which is explained below. If the call to 
the operating system 44 to receive a message returns with a time out, or 
5 if there is a message, the client task 58 searches the list of connection 
machines that are flowed controlled. For each flow controlled connection, 
it tries to advance the transaction state machines on the connection state 
machine list that are flow controlled. 

The server task 60 processes a request originating from the user at 
10 the remote location. The server task 60 interfaces with the back plane 
driver 56, the TCP/IP stack 54, and the operating system's 44 message 
services. The server task 60 posts requests to the back plane driver 56, 
and an associated call back routine uses the operating system 44 
message services to send the response to the server task 60. A TCP/IP 
15 stack 54 signal function also uses the operating system's 44 send service 
to send an TCP/IP event to the server task 60. The server task 60 can 
handle multiple transactions and connections. Like the client task 58, it 
maintains a list of connection machines, and each connection machine 
contains a list of transaction machines. The connection machines are for 
20 managing the connection and the transaction machines manage the 
incoming requests and responses. 

The server task 60 enters a loop after performing initialization. It 
calls the operating systems 44 to receive a message. The operating 
systems 44 blocks the server task 60 until there is a message or until it 
25 times out. It either receives a message from the TCP/IP task's 54 signal 
handler, from the back plane driver 56 or it times out. It processes the 
message or the time and reenters the loop. If the message received from 
the operating systems 44 is from the TCP/IP task's 54 signal handler, the 
server task 60 determines if the event is a connection request, a close 
30 socket event, or a receive data event. Based on the TCP/IP event, the 
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server task 60 uses the connection machine and transaction machine to 
advance the transaction. Received data for a request may occur over 
several receive data events, and the transaction machine assembles the 
events into a request message. When the response message is received 
5 from the operating system 44, the server task 60 finds the connection and 
transaction machine in order to send the response. 

When the server task 60 requests the TCP/IP stack 54 to transmit 
a message, not all of the message may be transmitted. This occurs when 
the remote node is flow controlled. If the call to the operating system 44 
10 is to receive a message returns with a time out, or if there is a message, 
the server task 54 searches the list of connection machines that are 
flowed controlled. For each flow controlled connection, it tries to advance 
the transaction state machines on the connection state machine list that 
are flow controlled. 
15 After the server task 60 has parsed the header of an incoming 

request, it attempts to allocate a structure to pass the request to the back 
plane driver 56. If the server task is already processing a predetermined 
number of outstanding requests, the attempt fails, the connection is 
placed into a blocked state, and the body of the request is not read from 
20 the TCP/IP stack 54. As a result the TCP/IP stack may apply flow control 
to the remote node. When one of the other requests is complete, the free 
data structure event causes a blocked connection machine to continue 
processing the incoming Modbus request. 

The HTTP task 62 interfaces with the TCP/IP stack 54, and the 
25 back plane driver 56. The HTTP server task 62 receives a HTTP request 
from the TCP/IP stack 54. To process the request, it may access the PLC 
32 through the back plane driver 56 and back plane 34. The HTTP server 
task 62 sends back the response over the TCP/IP stack 54. The 
framework is supplied by the operating system 44. The framework 
30 creates the HTTP task, accepts connection, and parses the HTTP 
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request. After parsing the request, it calls the operating system 44 to 
process the request. Processing the request involves determining the 
request type and processing the actual request. The different request 
types allow a user to acquire a snapshot of the PLC 32 operations by 
5 allowing a view of various registers within the PLC 32 and dual memory 
38. These request types also include display of the PLC 32 configuration, 
remote and distributed I/O and module health statistics, display registers, 
back plane configuration, Ethernet statistics and others as shown in Table 
1: 

o 

Show the home page 

Show the programmable logic controller's configuration 

Show the Ethernet statistics 

Show the read register request page 

Show the 4x registers 

Show the racks attached to the controllers back plane 
Send an image. The different images are gif Hies that are 
displayed on the various pages 

Show the remote I/O statistics * 

Show the list of configured remote I/O drops 

Show a remote I/O rack's configuration and health 

Show a remote I/O drop's communication statistics 

Show the t/O reference values of a remote I/O module 

Show a list of configured distributed I/O nodes 

Show the configuration and the health of a distributed I/O node 

Show the I/O reference values of a distributed I/O module 


TABLE 1 


15 


SUBSTITUTE SHEET (RULE 26) 


WO 99/13418 


PCIYUS98/18762 


The home page contains hyperlinks to seven pages of data. The 
configuration page will display the configuration of PLC 32. The remote 
I/O and distributed I/O module health status pages are a series of linked 
pages. The first page displays the communication health statistics at the 

5 Remote I/O and Distributed I/O head and contains a link to a configured 
drop page. The configured drop page displays a table containing drop 
numbers which are linked to a drop status page and rack numbers which 
are linked to the drop and rack configuration pages. Two tables are 
included in the drop status page, one for showing the communication 

10 status of the drop and the other for showing which racks are populated 
with the I/O modules. The drop and rack configuration page displays the 
I/O modules, their health, and slot location for the given rack. From a 
selected module, a user can view it's input and output values. Register 
data is displayed in a template having a form and a table, with the user 

15 entering an address and a length. The table will display the registers 
values. A table showing option modules and their slot location is 
* displayed on the back plane configuration page. The data appearing on 
the pages is static but can be automatically updated at preselected times. 
The operating system 44 processes these requests and responds 

20 by sending HTTP messages through the TCP/IP stack 54. Processing 
some of these requests involves reading the PLC's traffic cop, registers, 
coils, or various page zero locations where statistics are kept. To perform 
these reads, the operating system 44 sends a request to the back plane 
driver 56 and uses an event signal mechanism and event flags to 

25 determine when the request is complete. After sending the request to the 
back plane driver 56, the operating system 44 waits for an event flag to 
be sent. When the back plane driver completes the request, the back 
plane driver 56 calls a call back routine, which sets the event. The 
operating system 44 then resumes processing the request. 
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A mimic page which represents some of the hardware physically 
connected to a programmable logic controller system can be constructed 
utilizing various graphical programs readily available and that are not an 
object of the present invention. The present invention allows a user at a 
5 remote location, using a browser, to view the mimic page and actually 
control various components illustrated in the mimic page. Figure 4 
shows a simple motor start-stop control in ladder logic diagram form that 
could be available as a mimic page to the user. Pushing a motor start 
push button 150 will cause a motor start relay 152 to energize through a 
10 normally closed stop push button 154 and a normally closed overload 

contact 156. Auxiliary motor start contact 158 wiil latch relay 152 after the 
start push button 150 is released and pilot light 160 will illuminate. 
Auxiliary motor start contact 162 will provide power to pump motor 164 
which will remain running until stop push button 154 is depressed or 
15 overload relay 166 detects an overload condition. In this example, start 
push button 150, stop push button 154, overload contact 156, auxiliary 
motor start contacts 158 and 162, and overload relay 166 are inputs to 
the programmable logic controller system. Relay 152, pilot light 160, and 
pump motor 164 are outputs. The PLC will have the registers containing 
20 the animation data for the inputs and outputs. An application program in 
the PLC will respond to the inputs to control the outputs. 

A user at a remote location will browse the Internet for the home 
page of the installation of the programmable logic controller system. The 
PLC will have other control functions as well and if the user has the 
25 necessary authorizations, various options will become available. The 
home page will allow the user to acquire a snapshot of the PLC 
operations by allowing a view of various pages that will allow access to 
registers within the PLC. Other pages will also include displays of the 
PLC's configuration, remote and distributed I/O modules health statistics, 
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display registers, back plane configuration, Ethernet statistics and others 

as shown previously shown in Table 1. 

The mimic diagram page wiil be called up on a browser screen 

which will allow the user to view the status of the system. The mimic 
5 diagram's light 160, relay 152, contacts 158, 162, and pump motor 164 

will be updated to correspond to the state of the actual devices. The 

states of the inputs and outputs will then be shown on the ladder diagram 

which will be automatically updated as they are changed. Through the 

use of applets representing the start 150 and stop 154 buttons, the user 
10 could manually control start and stopping of the motor by using a mouse 

or keyboard to position a cursor and "clicking" on either the start 168 or 

stop 1 70 boxes. 

While the specific embodiments have been illustrated and 

described, numerous 
15 modifications are possible without departing from the scope or spirit of the 

invention. 
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CLAIMS 

We claim: 

5 

1 . An interface module for allowing access to a programmable logic 

controller system from a communication network at a remote 
location, the interface module adapted for installation in a 
slot coupled through a back plane to a programmable logic 
io controller, the module comprising: 

A. a microprocessor; 

B. a real time operating system; 

C. means for coupling the interface module to said 
communications network; 

15 D. means for coupling the interface module to said back 

plane and for transferring data between the interface 
module and said programmable logic controller; 

E. means for processing data requests received from 
said remote location over said communications 

20 network; 

F. means for enabling data transfers between the 
remote location and said programmable logic 
controller system; and 

G. means for interfacing a protocol task with said back 
25 plane, said interfacing means for receiving a data 

request from said enabling means, for accessing said 
programmable logic controller system for said 
requested data, and for sending a response to said 
remote location through said enabling means, said 
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response in a framework supplied by said operating 
system. 

The interface module of claim 1 wherein said communication 
network is a world-wide network known as Internet using an 
Internet Protocol (IP). 

The interface module of claim 2 wherein said interface module 
functions as a web site on said Internet, said interface module 
including a global IP address. 

The interface module of claim 3 wherein said network coupling 
means includes a network driver for receiving data requests from a 
browser on said Internet and for sending a response back to said 
browser. 

The interface module of claim 4 wherein said back plane coupling 
means includes a back plane driver for coupling the interface 
module to said back plane driver and including means for 
accessing a dual port memory in said programmable logic 
controller for transferring data between the interface module and 
said programmable logic controller. 

The interface module of claim 5 wherein said processing data 
requests means includes a client task for initiating requests 
received from said communications network and a server task for 
processing data requests received from said communications 
network. 
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7. The interface module of claim 6 wherein said data transfer 

enabling means includes a protocol stack using a Transmission 
Control Protocol (TCP) stack. 

5 8. The interface module of claim 7 wherein said protocol task 
interfacing means includes a server task using HyperText 
Transport Protocol (HTTP) to deliver hypertext documents to said 
network coupling means. 

10 9. The interface module of claim 8 wherein said framework creates a 
HTTP task, accepts a connection, parses the HTTP request and 
calls the real time operating system to process the request 

10. The interface module of claim 9 wherein said data requests allow a 
!5 user at a remote location to view data within said programmable 

logic controller from said browser on said Internet. 

1 1 . The interface module of claim 10 wherein said data requests further 
including requests for views of said programmable logic controller's 

20 configuration and status of input and output devices coupled to the 

programmable logic controller. 

12. An interface module for allowing access to a programmable logic 
controller system from a communication network at a remote 

25 location, the interface module adapted for installation in a slot 

coupled through a back plane to a programmable logic controller, 
the module comprising: 

A. a microprocessor; 

B. a real time operating system; 
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C. a network interface for coupling the interface module 
to said communications network; 

D. a back plane driver for coupling the interface module 
to said back plane and for transferring data between 
the interface module and said programmable logic 
controller; 

E. a server application for processing data requests 
received from said communications network; 

F. a client application for initiating requests received 
from said communications network; 

G. a protocol stack to enable data transfer between the 
remote location and said programmable logic 
controller system; and 

H. a server task for interfacing said protocol task with 
said back plane, said server task for receiving a data 
request from said protocol stack, accessing said 
programmable logic controller system for said 
requested data, and for sending a response to said 
remote location through said protocol stack and 
network interface, said response in a framework 
supplied by said operating system. 


13. The interface module of claim 12 wherein said communication 
network is a world-wide network known as Internet using an 

25 Internet Protocol (IP). 

14. The interface module of claim 13 wherein said interface module 
functions as a web site on said Internet. 
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10 


15 


15> The interface module of claim 14 wherein said protocol stack is a 
Transmission Control Protocol (TCP)/IP stack. 

16. The interface module of claim 15 wherein said server task uses 
HyperText Transport Protocol (HTTP) to deliver hypertext 
documents, and said framework for creating a HTTP task, accepting 
a connection, parsing the HTTP request and calling the real time 
operating system to process the request. 

17. The interface module of claim 16 wherein said data requests allow a 
user at a remote location to view data within said programmable 
logic controller. 

18. The interface module of claim 17 wherein said data requests further 
including views of said programmable logic controller's 
configuration and status of input and output devices coupled to the 
programmable logic controller. 
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